Potential Security Vulnerability in sendmail (rev.8)

[Berlene Herren]

A security bulletin has been issued:

-----------------------------------------------------------------
**REVISED 08**
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0304-253
Originally issued: 03 April 2003
Last revised: 18 August 2003
SSRT3531 Potential Security Vulnerability in sendmail (rev.8)


-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0304-253"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

Berlene




**REVISED 08**
SOLUTION: B.10.10 - write to security-alert@hp.com for information
B.10.20 - install PHNE_28760
B.11.00 (sendmail-8.9.3) - install PHNE_28809
B.11.00 (sendmail-8.11.1) - install web upgrade
--> B.11.04 - install PHNE_29526
B.11.11 (sendmail-8.9.3) - install PHNE_28810
B.11.11 (sendmail-8.11.1) - install web upgrade
B.11.22 - install PHNE_28409

[Martin Christov]

Hello Berlene,
I would like to know if there is currently an effort in progress by HP for supporting sendmail-8.12.
Kind regards:
Martin

[Berlene Herren]

Hello Martin,
There is a request into the lab to have it ported to HP, but no timeframe as of yet. Believe me, when I get the word, I'll be posting it!

Tks
Berlene